Stylishcostcalculator

Stylish Cost Calculator

2 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
6.1

CVE-2023-0983

Exploit
  • EPSS 0.15%
  • Veröffentlicht 10.04.2023 14:15:08
  • Zuletzt bearbeitet 11.02.2025 22:15:24

The stylish-cost-calculator-premium WordPress plugin before 7.9.0 does not sanitise and escape a parameter before outputting it back in the page, leading to a Stored Cross-Site Scripting which could be used against admins when viewing submissions sub...

5.4

CVE-2021-24822

Exploit
  • EPSS 0.11%
  • Veröffentlicht 29.11.2021 09:15:07
  • Zuletzt bearbeitet 21.11.2024 05:53:49

The Stylish Cost Calculator WordPress plugin before 7.0.4 does not have any authorisation and CSRF checks on some of its AJAX actions (available to authenticated users), which could allow any authenticated users, such as subscriber to call them, and ...